CVE-2021-3763
mediumpriority · track · 17OT risk · elevatedEPSS 0.007 · 53 %ileEUUSEPSS · scored 2026-10-27
A flaw was found in the Red Hat AMQ Broker management console in version 7.8 where an existing user is able to access some limited information even when the role the user is assigned to should not be allow access to the management console. The main impact is to confidentiality as this flaw means some role bindings are incorrectly checked, some privileged meta information such as queue names and configuration details are disclosed but the impact is limited as not all information is accessible and there is no affect to integrity.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (13)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/CVE-2021-3763cnnvd
- https://bugzilla.redhat.com/show_bug.cgi?id=2000654cnnvd
- https://cxsecurity.com/cveshow/CVE-2021-3763/cnnvd
- https://issues.redhat.com/browse/ENTMQBR-5372cnnvd
- https://packetstormsecurity.com/files/164346/Red-Hat-Security-Advisory-2021-3700-01.htmlcnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.3256cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021093016cnnvd
- https://access.redhat.com/security/cve/CVE-2021-3763enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan